www.revivalanimal.com

- Revival Animal Health, Inc. -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 73:5b:cb:d9:6a:3e:3c:23:65:84:31:f7:46:b4:27:a2 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Revival Animal Health, Inc.

Company registration number: 179085
Organization: Revival Animal Health, Inc.
Organization unit: Revival Animal Health, Inc.
State / Province: Iowa
Locality: Orange City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:5b:cb:d9:6a:3e:3c:23:65:84:31:f7:46:b4:27:a2
Serial Number (int): 153337853083933450019410131874322065314
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 7c:72:95:2c:69:89:c9:d8:da:e8:63:f5:02:72:0f:ac:01:73:27:ca
Fingerprint (sha256): 4f:db:bc:40:59:e3:45:72:ab:2e:38:ca:68:c7:6b:d3:4d:ad:8c:46:91:ff:39:a0:f0:cf:45:d3:52:8d:ef:98

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate www.revivalanimal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.revivalanimal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.revivalanimal.com
revivalanimal.com

Other certificates including the domain name revivalanimal.com

(limited to 100 certificates)
ambassadors.nationallottery.be
link.socialsharing.kbccorporatebanking.be
cl.sw-t.ch
ambassadors.revivalanimal.com
forwrd.it
info.nucleairforum.be
blog.revivalanimal.com
ambassadors.nationallottery.be
ambassadors.nationallottery.be
forwrd.it
cl.sw-t.ch
ambassadors.revivalanimal.com
knhccb.revivalanimal.com
revivalanimal.com
ambassadors.nationallottery.be
revivalanimal.com
community.ambassify.com
ci-cartsync.revivalanimal.com
cl.sw-t.ch
www.revivalanimal.com
www.revivalanimal.com
socialsharing.bankenverzekering.kbc.be
landing-employees.nationallottery.be
forwrd.it
revivalanimal.com
ambassadors.revivalanimal.com
www.revivalanimal.com
ambassadors.revivalanimal.com
link.socialsharing.cbc.be
www.revivalanimal.com
revivalanimal.com
dsigateway.revivalanimal.com
pet-healthcare.revivalanimal.com
landing-socialsharing.kbccorporatebanking.be
revivalanimal.com
socialsharing.cbc.be
ambassadors.revivalanimal.com
ambassadors.lotto.be
forwrd.it
forwrd.it
club.switch.be
ambassadors.lotto.be
knhccb.revivalanimal.com
www.revivalanimal.com
info.nucleairforum.be
redirect.brand.ambassify.eu
ci-cartsync.revivalanimal.com
www.revivalanimal.com
revivalanimal.com
blog.revivalanimal.com
ambassadors.nationallottery.be
revivalanimal.com
www.revivalanimal.com
www.revivalanimal.com
revivalanimal.com
www.revivalanimal.com
www.revivalanimal.com
pet-healthcare.revivalanimal.com
blog.revivalanimal.com
cl.sw-t.ch
link.socialsharing.kbc.be
socialsharing.kbcprivatebanking.be
app.brand.ambassify.eu
forwrd.it
link.socialsharing.bankenverzekering.kbc.be
pet-healthcare.revivalanimal.com
forwrd.it
landing-employees.nationallottery.be
www.revivalanimal.com
www.revivalanimal.com
www.revivalanimal.com
revivalanimal.com
www.revivalanimal.com
www.revivalanimal.com
forwrd.it
landing-ambassadors.kpmg.be
cl.sw-t.ch
revivalanimal.com
share.kpmg.be
cl.sw-t.ch
ambassadors.nationallottery.be
forwrd.it
landing-rekrutering.socialsharing.kbc.be
landing-socialsharing.kbccorporatebanking.be
blog.revivalanimal.com
info.barco.com

Certificate

The complete raw certificate details for www.revivalanimal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4KEEbqyPkFBaITh6lv
3Gz4cSnaEbT1EUtQNmGgLl5b96XDglBA9JHRLWB2ZalAC79q0cNsQOus+63VtWUG
87HlVKlkBK0QeBvLv7H1e89gNOmU7sG/8kB80CkMvaOlkRcfxCzPfUF9MzK/PfZ8
EfrxcU9HLHRb31e8desielFa/EVEM3H8EKjP3VXXAbBwOlzRJIu1/v6RHCNg0du4
ZL7YP7j98nGbnrvptVvSPq8+neNEijHwBPxgVxvTW/RZm9lIIABgpPOZATlHu7BR
PBQXUXp/0Br5uHAX++YaCKwcZCzviAj1v5xOOK7CFbDetkatDVqbpSqO5MdoY3hL
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153337853083933450019410131874322065314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '179085'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Orange City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Revival Animal Health, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Revival Animal Health, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.revivalanimal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19558080523832467092034537106818937316001853788998730577125982467682856729866013026255513429390793848073594722985618612328416299667621391211919555312641333259374196128438370954661953870170719787223323317983459711159062434706424013747173250452400912850298027013471137003303557766365323608572713076649539042089435500641602306440307084792171872471794736518330144450712473601798249927071625040888007962026231252667305488833394698822768185770328013304673605237147902805637129043943385976876995681711608919695493555980937694921074486243827903249741438310874344008731634790442831136708194484189674749238809864303152561933201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revivalanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revivalanimal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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